Skip to content

chore(deps): bump whitenoise from 6.6.0 to 6.12.0#65

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/whitenoise-6.12.0
Open

chore(deps): bump whitenoise from 6.6.0 to 6.12.0#65
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/whitenoise-6.12.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 2, 2026

Bumps whitenoise from 6.6.0 to 6.12.0.

Changelog

Sourced from whitenoise's changelog.

6.12.0 (2026-02-27)

  • Drop Python 3.9 support.
  • Fix potential unauthorised file access vulnerability in "autorefesh" mode. See PR [#684](https://github.com/evansd/whitenoise/issues/684) <https://github.com/evansd/whitenoise/pull/684>__ for details, and a reminder that autorefresh mode has always been documented as unsuitable for production use. Thanks Seth Larson for reporting.

6.11.0 (2025-09-18)

  • Support Django 6.0.

6.10.0 (2025-09-09)

  • Support Python 3.14.

6.9.0 (2025-02-06)

  • Support Django 5.2.

6.8.2 (2024-10-29)

  • Fix compression speed gains for the thread pool when running Django’s collectstatic. The thread pool had no effect due to use of a generator for the results, a refactoring introduced when reviewing the initial PR.

    Thanks to Petr Přikryl for the investigation and fix in PR [#616](https://github.com/evansd/whitenoise/issues/616) <https://github.com/evansd/whitenoise/pull/616>__.

6.8.1 (2024-10-28)

  • Raise any errors from threads in the whitenoise.compress command.

    Regression in 6.8.0. Thanks to Tom Grainger for the spotting this with a comment on PR [#484](https://github.com/evansd/whitenoise/issues/484) <https://github.com/evansd/whitenoise/pull/484#discussion_r1818989096>__.

6.8.0 (2024-10-28)

  • Drop Django 3.2 to 4.1 support.

  • Drop Python 3.8 support.

  • Support Python 3.13.

  • Fix a bug introduced in version 6.0.0 where Range requests could lead to database connection errors in other requests.

    Thanks to Per Myren for the detailed investigation and fix in PR [#612](https://github.com/evansd/whitenoise/issues/612) <https://github.com/evansd/whitenoise/pull/612>__.

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added automated Auto-created for Dependabot and workflow automation dependencies Auto-created for Dependabot and workflow automation python Auto-created for Dependabot and workflow automation labels Mar 2, 2026
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Mar 2, 2026

Deploying meetspot with  Cloudflare Pages  Cloudflare Pages

Latest commit: 2789850
Status: ✅  Deploy successful!
Preview URL: https://05dc289b.meetspot.pages.dev
Branch Preview URL: https://dependabot-pip-whitenoise-6-7eqs.meetspot.pages.dev

View logs

@github-actions github-actions Bot added needs-review Auto-created for Dependabot and workflow automation major-update Auto-created for Dependabot and workflow automation labels Mar 2, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/whitenoise-6.12.0 branch from 4bcd2e2 to 904ae42 Compare March 2, 2026 01:10
Bumps [whitenoise](https://github.com/evansd/whitenoise) from 6.6.0 to 6.12.0.
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.6.0...6.12.0)

---
updated-dependencies:
- dependency-name: whitenoise
  dependency-version: 6.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/whitenoise-6.12.0 branch from 904ae42 to 2789850 Compare March 2, 2026 01:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Auto-created for Dependabot and workflow automation dependencies Auto-created for Dependabot and workflow automation major-update Auto-created for Dependabot and workflow automation needs-review Auto-created for Dependabot and workflow automation python Auto-created for Dependabot and workflow automation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant